What’s Vulnerable › Vulnerabilities

CVE-2024-57429

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-02-06 · updated 2026-06-17
• Weakness: CWE-352

Description

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request.

Affected products

• PHP Jabbers Cinema Booking System: 2.0

References

• https://github.com/ahrixia/CVE-2024-57429
• https://www.phpjabbers.com/cinema-booking-system/

Get alerted when CVE-2024-57429 or the next vulnerability affects your stack